mt6985-CVE-2026-43499

Registro de fallo CVE-2026-43499: Intento de adaptación MT6985 Conclusión : Gasté 68M tokens, no obtuve root. Causa : El ataque de temporización KernelSnitch no es fiable en MTK Dimensity 9200, CONFIGPANICONOOPS=y no deja margen para prueba y error. Este artículo documenta el proceso completo de...

CVE-2025-55885

CVE-2025-55885 Descripción Vulnerabilidad de inyección SQL en Alpes Recherche et Developpement ARD GEC en Ligne anterior a v.2025-04-23 permite a un atacante remoto escalar privilegios a través de los parámetros GET en index.php Vectores de Ataque Inyección SQL a través del parámetro GET no...

CVE-2026-38765

CVE-2026-38765 Un problema en Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 permite a un atacante local escalar privilegios a través del controlador del kernel pgsecdl.sys...

EUVD-2026-92315

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2026-103510 Authentication bypass via blank auth token in P4Search

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2026-103510 Authentication bypass via blank auth token in P4Search

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2026-103510

P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the service does not fail securely when presented with a blank authentication token . An unauthenticated attacker with network access can exploit this flaw to obtain highest application privileges , potentiall...

CVE-2026-38764

CVE-2026-38764 Un problema en Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 permite a un atacante local escalar privilegios a través del controlador de kernel pgsecdl.sys...

CVE-2026-43494-PinTheft-PoC

SLEY — PoC de PinTheft CVE-2026-43494 Prueba de concepto — uid=1000raken → uid=0root después de ./sley en WSL2 6.6.87.2-microsoft-standard-WSL2 Prueba de concepto de un solo archivo para CVE-2026-43494 PinTheft: una escalada local de privilegios en el kernel de Linux que encadena un bug de conteo...

CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Objetivo del repositorio Este repositorio documenta la vulnerabilidad CVE-2026-31431 , apodada Copy Fail , y propone un procedimiento de remediación defensiva para sistemas Linux potencialmente expuestos. ⚠️ Este repositorio está estrictamente...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Autorización faltante para usuarios autenticados Suscriptor+ que permite la actualización arbitraria de metadatos de usuario Descripción El plugin WP Courses LMS – Online...

EUVD-2026-92301

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

CVE-2019-17658

Exploit de ruta de servicio sin comillas en FortiClient CVE-2019-17658 FortiClient para Windows anterior a la versión 6.2.3 es vulnerable a una vulnerabilidad de ruta de servicio sin comillas. Esto puede permitir a un atacante obtener privilegios elevados a través de la ruta del servicio ejecutab...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

Important: Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

An update for libvirt is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

EUVD-2026-92291

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1: Escalada de privilegios no autenticada a Administrador | ---|--- Producto| Events Manager plugin de WordPress Versiones afectadas| 7.1.0 – 7.4.0.x Versión corregida| 7.4.1 Debilidad| CWE-269: Gestión inadecuada de privilegios Severidad| CVSS 3.1: 9.8 Crítica...

CVE-2023-3460_FIX

CVE-20233460 Este laboratorio está creado con fines de aprendizaje y escalada de privilegios. Para practicar la escalada de privilegios, pueden leer el enlace de abajo. https://viblo.asia/p/leo-thang-dac-quyen-trong-linux-linux-privilege-escalation-1-using-suid-bit-QpmlexgrZrd...

CVE-2021-39409

CVE-2021-39409 El registro de cuentas de administrador es posible en Online Student Rate System v1.0, lo que permite a un actor malicioso crear una cuenta de administrador y acceder al panel de administración. Vulnerabilidad POST /ajax.php?action=signup HTTP/1.1 Host: localhost User-Agent:...